Balloons and double encoding and Bootstrap, Oh Dear!

Jake and Michael discuss Laracon announcements, new framework features, model caching, and more.

Show links


141: Web Application Security, Part 2 with Scott Arciszewski

In this weeks episode we continue our discussion with Scott Arciszewski about all things Security and Cryptography. We start off the show by highlighting what a SQL injection attack is and the differences between (emulated) prepared statements. This leads us on to look into how to securely handle file uploads, what a reverse shell is and how to defend yourself against XSS/CSRF attacks. From here we touch upon the recent inclusion of libsodium into PHP, why mcrypt should be avoided, and the side-channel vulnerabilities that brought way to Meltdown and Spectre. Finally, we mention how computers generate seemingly random numbers, what a Web Application Firewall (WAF) is, and how WARD goes about protecting your systems.


140: Web Application Security, Part 1 with Scott Arciszewski

In this weeks episode we chat with Scott Arciszewski about all things Security and Cryptography. We start off the show by explaining how he got interested in this field of work, correcting PHP security related answers on Stack Overflow and why he focuses on PHP security. From here, we move on to highlight what the OWASP Top Ten is, how you can distill many security principles into data/code seperation and what is involved in a software audit. This leads us on to discuss what HTTPS actually is, touching on TLS, PKI’s, Ciphersuites, and reported attacks against TLS and ECB. Finally, we highlight some important browser security features that can be used, pushing new software releases in a secure manor, thoughts on Cryptocurrencies and how everyone wants to solve their problem with a blockchain at this time.



91: We push the wrong button

Recorded January 11, 2018

Topics


MageTalk Episode 157 – “We Shan’t Speak About Monrovia”

Show Notes

Transcript

Coming Soon!


MageTalk Classics – James Zetlen, Tony Brown and Brendan Falkowski

We’re still vacationing hardcore in the islands so we’re bringing you this classic episode from April 2017 you might have missed! James Zetlen, Tony Brown of Space48 and Brendan Falkowski join us to talk Imagine 2017 announcements and frontend tooling as well as a possible future with PWAs

Guests

Hosts

Credits

  • Mallory Triana – Transcription
  • Rebecca Brocton – Show Notes
  • Chris Harry – Production and Editing

Show Notes

Coming soon!




Laravel releases, Laracon Online, and soft edges

Jake and Michael return for 2018 and catch up on several framework releases from the break, discuss the upcoming Laracon Online, and community projects from Chris Fidao and Steve Schoger.

Show links